1 --- a/include/mbedtls/config.h
2 +++ b/include/mbedtls/config.h
5 * Uncomment to get errors on using deprecated functions.
7 -//#define MBEDTLS_DEPRECATED_REMOVED
8 +#define MBEDTLS_DEPRECATED_REMOVED
10 /* \} name SECTION: System support */
14 * Enable Cipher Feedback mode (CFB) for symmetric ciphers.
16 -#define MBEDTLS_CIPHER_MODE_CFB
17 +//#define MBEDTLS_CIPHER_MODE_CFB
20 * \def MBEDTLS_CIPHER_MODE_CTR
23 * Comment macros to disable the curve and functions for it
25 -#define MBEDTLS_ECP_DP_SECP192R1_ENABLED
26 -#define MBEDTLS_ECP_DP_SECP224R1_ENABLED
27 +//#define MBEDTLS_ECP_DP_SECP192R1_ENABLED
28 +//#define MBEDTLS_ECP_DP_SECP224R1_ENABLED
29 #define MBEDTLS_ECP_DP_SECP256R1_ENABLED
30 -#define MBEDTLS_ECP_DP_SECP384R1_ENABLED
31 -#define MBEDTLS_ECP_DP_SECP521R1_ENABLED
32 -#define MBEDTLS_ECP_DP_SECP192K1_ENABLED
33 -#define MBEDTLS_ECP_DP_SECP224K1_ENABLED
34 +//#define MBEDTLS_ECP_DP_SECP384R1_ENABLED
35 +//#define MBEDTLS_ECP_DP_SECP521R1_ENABLED
36 +//#define MBEDTLS_ECP_DP_SECP192K1_ENABLED
37 +//#define MBEDTLS_ECP_DP_SECP224K1_ENABLED
38 #define MBEDTLS_ECP_DP_SECP256K1_ENABLED
39 -#define MBEDTLS_ECP_DP_BP256R1_ENABLED
40 -#define MBEDTLS_ECP_DP_BP384R1_ENABLED
41 -#define MBEDTLS_ECP_DP_BP512R1_ENABLED
42 +//#define MBEDTLS_ECP_DP_BP256R1_ENABLED
43 +//#define MBEDTLS_ECP_DP_BP384R1_ENABLED
44 +//#define MBEDTLS_ECP_DP_BP512R1_ENABLED
45 #define MBEDTLS_ECP_DP_CURVE25519_ENABLED
49 * Requires: MBEDTLS_HMAC_DRBG_C
51 * Comment this macro to disable deterministic ECDSA.
53 #define MBEDTLS_ECDSA_DETERMINISTIC
57 * \def MBEDTLS_KEY_EXCHANGE_PSK_ENABLED
59 * MBEDTLS_TLS_DHE_PSK_WITH_3DES_EDE_CBC_SHA
60 * MBEDTLS_TLS_DHE_PSK_WITH_RC4_128_SHA
62 -#define MBEDTLS_KEY_EXCHANGE_DHE_PSK_ENABLED
63 +//#define MBEDTLS_KEY_EXCHANGE_DHE_PSK_ENABLED
66 * \def MBEDTLS_KEY_EXCHANGE_ECDHE_PSK_ENABLED
68 * MBEDTLS_TLS_ECDHE_PSK_WITH_CAMELLIA_128_CBC_SHA256
69 * MBEDTLS_TLS_ECDHE_PSK_WITH_3DES_EDE_CBC_SHA
70 * MBEDTLS_TLS_ECDHE_PSK_WITH_RC4_128_SHA
72 #define MBEDTLS_KEY_EXCHANGE_ECDHE_PSK_ENABLED
76 * \def MBEDTLS_KEY_EXCHANGE_RSA_PSK_ENABLED
78 * MBEDTLS_TLS_RSA_PSK_WITH_3DES_EDE_CBC_SHA
79 * MBEDTLS_TLS_RSA_PSK_WITH_RC4_128_SHA
81 -#define MBEDTLS_KEY_EXCHANGE_RSA_PSK_ENABLED
82 +//#define MBEDTLS_KEY_EXCHANGE_RSA_PSK_ENABLED
85 * \def MBEDTLS_KEY_EXCHANGE_RSA_ENABLED
87 * MBEDTLS_TLS_DHE_RSA_WITH_CAMELLIA_128_CBC_SHA
88 * MBEDTLS_TLS_DHE_RSA_WITH_3DES_EDE_CBC_SHA
90 -#define MBEDTLS_KEY_EXCHANGE_DHE_RSA_ENABLED
91 +//#define MBEDTLS_KEY_EXCHANGE_DHE_RSA_ENABLED
94 * \def MBEDTLS_KEY_EXCHANGE_ECDHE_RSA_ENABLED
96 * MBEDTLS_TLS_ECDH_ECDSA_WITH_CAMELLIA_128_GCM_SHA256
97 * MBEDTLS_TLS_ECDH_ECDSA_WITH_CAMELLIA_256_GCM_SHA384
99 -#define MBEDTLS_KEY_EXCHANGE_ECDH_ECDSA_ENABLED
100 +//#define MBEDTLS_KEY_EXCHANGE_ECDH_ECDSA_ENABLED
103 * \def MBEDTLS_KEY_EXCHANGE_ECDH_RSA_ENABLED
105 * MBEDTLS_TLS_ECDH_RSA_WITH_CAMELLIA_128_GCM_SHA256
106 * MBEDTLS_TLS_ECDH_RSA_WITH_CAMELLIA_256_GCM_SHA384
108 -#define MBEDTLS_KEY_EXCHANGE_ECDH_RSA_ENABLED
109 +//#define MBEDTLS_KEY_EXCHANGE_ECDH_RSA_ENABLED
112 * \def MBEDTLS_KEY_EXCHANGE_ECJPAKE_ENABLED
114 * This option is only useful if both MBEDTLS_SHA256_C and
115 * MBEDTLS_SHA512_C are defined. Otherwise the available hash module is used.
117 -//#define MBEDTLS_ENTROPY_FORCE_SHA256
118 +#define MBEDTLS_ENTROPY_FORCE_SHA256
121 * \def MBEDTLS_ENTROPY_NV_SEED
122 @@ -917,14 +917,14 @@
123 * Uncomment this macro to disable the use of CRT in RSA.
126 -//#define MBEDTLS_RSA_NO_CRT
127 +#define MBEDTLS_RSA_NO_CRT
130 * \def MBEDTLS_SELF_TEST
132 * Enable the checkup functions (*_self_test).
134 -#define MBEDTLS_SELF_TEST
135 +//#define MBEDTLS_SELF_TEST
138 * \def MBEDTLS_SHA256_SMALLER
141 * Uncomment to enable the smaller implementation of SHA256.
143 -//#define MBEDTLS_SHA256_SMALLER
144 +#define MBEDTLS_SHA256_SMALLER
147 * \def MBEDTLS_SSL_ALL_ALERT_MESSAGES
148 @@ -1059,8 +1059,8 @@
149 * misuse/misunderstand.
151 * Comment this to disable support for renegotiation.
153 #define MBEDTLS_SSL_RENEGOTIATION
157 * \def MBEDTLS_SSL_SRV_SUPPORT_SSLV2_CLIENT_HELLO
158 @@ -1234,8 +1234,8 @@
159 * callbacks are provided by MBEDTLS_SSL_TICKET_C.
161 * Comment this macro to disable support for SSL session tickets
163 #define MBEDTLS_SSL_SESSION_TICKETS
167 * \def MBEDTLS_SSL_EXPORT_KEYS
168 @@ -1265,7 +1265,7 @@
170 * Comment this macro to disable support for truncated HMAC in SSL
172 -#define MBEDTLS_SSL_TRUNCATED_HMAC
173 +//#define MBEDTLS_SSL_TRUNCATED_HMAC
176 * \def MBEDTLS_THREADING_ALT
177 @@ -1299,8 +1299,8 @@
178 * Requires: MBEDTLS_VERSION_C
180 * Comment this to disable run-time checking and save ROM space
182 #define MBEDTLS_VERSION_FEATURES
186 * \def MBEDTLS_X509_ALLOW_EXTENSIONS_NON_V3
187 @@ -1501,7 +1501,7 @@
188 * MBEDTLS_TLS_RSA_PSK_WITH_RC4_128_SHA
189 * MBEDTLS_TLS_PSK_WITH_RC4_128_SHA
191 -#define MBEDTLS_ARC4_C
192 +//#define MBEDTLS_ARC4_C
195 * \def MBEDTLS_ASN1_PARSE_C
196 @@ -1621,7 +1621,7 @@
197 * MBEDTLS_TLS_PSK_WITH_CAMELLIA_128_GCM_SHA256
198 * MBEDTLS_TLS_PSK_WITH_CAMELLIA_128_CBC_SHA256
200 -#define MBEDTLS_CAMELLIA_C
201 +//#define MBEDTLS_CAMELLIA_C
205 @@ -1635,7 +1635,7 @@
206 * This module enables the AES-CCM ciphersuites, if other requisites are
209 -#define MBEDTLS_CCM_C
210 +//#define MBEDTLS_CCM_C
213 * \def MBEDTLS_CERTS_C
214 @@ -1647,7 +1647,7 @@
216 * This module is used for testing (ssl_client/server).
218 -#define MBEDTLS_CERTS_C
219 +//#define MBEDTLS_CERTS_C
222 * \def MBEDTLS_CIPHER_C
223 @@ -1700,7 +1700,7 @@
225 * This module provides debugging functions.
227 -#define MBEDTLS_DEBUG_C
228 +//#define MBEDTLS_DEBUG_C
232 @@ -1725,8 +1725,8 @@
233 * MBEDTLS_TLS_PSK_WITH_3DES_EDE_CBC_SHA
235 * PEM_PARSE uses DES/3DES for decrypting encrypted keys.
237 #define MBEDTLS_DES_C
242 @@ -1880,8 +1880,8 @@
243 * Requires: MBEDTLS_MD_C
245 * Uncomment to enable the HMAC_DRBG random number geerator.
247 #define MBEDTLS_HMAC_DRBG_C
252 @@ -2158,7 +2158,7 @@
253 * Caller: library/mbedtls_md.c
256 -#define MBEDTLS_RIPEMD160_C
257 +//#define MBEDTLS_RIPEMD160_C
261 @@ -2235,8 +2235,8 @@
264 * Requires: MBEDTLS_SSL_CACHE_C
266 #define MBEDTLS_SSL_CACHE_C
270 * \def MBEDTLS_SSL_COOKIE_C
271 @@ -2257,8 +2257,8 @@
274 * Requires: MBEDTLS_CIPHER_C
276 #define MBEDTLS_SSL_TICKET_C
280 * \def MBEDTLS_SSL_CLI_C
281 @@ -2357,8 +2357,8 @@
282 * Module: library/version.c
284 * This module provides run-time version information.
286 #define MBEDTLS_VERSION_C
290 * \def MBEDTLS_X509_USE_C
291 @@ -2468,7 +2468,7 @@
292 * Module: library/xtea.c
295 -#define MBEDTLS_XTEA_C
296 +//#define MBEDTLS_XTEA_C
298 /* \} name SECTION: mbed TLS modules */